XSS Vulnerability at jfinal cms publishing blog posts

jfinal cms is a java development of powerful information consulting website , using a simple and powerful JFinal as the web framework , template engine with beetl, database with mysql, front-end bootstrap framework. jfinal cms publish blog posts at the existence of XSS vulnerabilities , attackers...

XSS Vulnerability in jfinal cms User Profile Edit

jfinal cms is a java development of powerful information consulting website , using a simple and powerful JFinal as the web framework , template engine with beetl, database with mysql, front-end bootstrap framework. jfinal cms user profile editing XSS vulnerability , an attacker can exploit the...

XSS vulnerability exists in jeesns (CNVD-2020-33191)

JEESNS is an open source social management system developed on the JAVA enterprise level platform. JEESNS XSS vulnerability , attackers can use the vulnerability to obtain user COOKIE information...

XSS vulnerability in weiphp plugin micro exam Qu***.php page

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. An XSS vulnerability exists in the weiphp plugin microexamQu.php page. Attackers can use the vulnerability to insert malicious js code to obtain user cookie...

XSS vulnerability in weiphp plugin micro booking Re***.php page

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. An XSS vulnerability exists in the weiphp plugin microappointmentRe.php page. Attackers can use the vulnerability to insert malicious js code to obtain user...

XSS Vulnerability in JAVAPMS Portal Management System

JAVAPMS portal management system to SpringMVC + Spring + Hibernate + Freemarker + Html5 + jQuery for the technical core architecture , for individual webmasters , commercial enterprises , government agencies , educational institutions and other various units of the organization's information port...

XSS vulnerability in the JAVAPMS portal management system (CNVD-2020-33182)

JAVAPMS portal management system to SpringMVC + Spring + Hibernate + Freemarker + Html5 + jQuery for the technical core architecture , for individual webmasters , commercial enterprises , government agencies , educational institutions and other various units of the organization's information port...

Weiphp 5.0beta official plugin microvoting frontend Vo***.php page has XSS vulnerability

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. Weiphp5.0beta official plugin microvoting foreground Vo.php page exists XSS vulnerability. Attackers can use the vulnerability to insert malicious js code t...

Multiple Storage-based Cross-site Scripting Vulnerabilities in DM Building System Frontend

DM building system is developed by php + mysql a set of specialized for small and medium-sized enterprise website construction of open source cms. DM building system front-end exists in a number of storage-based cross-site scripting vulnerabilities. Attackers can exploit the vulnerability to obta...

Stored Cross-Site Scripting Vulnerability in ZrLog

ZrLog is a blogging program developed using Java. A stored cross-site scripting vulnerability exists in ZrLog. An attacker can exploit the vulnerability to obtain sensitive information such as user cookies...

DigitalOcean: Blind XSS via Digital Ocean Partner account creation form.

Summary: Blind Cross-Site Scripting XSS was discovered at Digital Ocean Partners admin panel/dashboard where an attacker can run arbitrary Javascript Code at victims' end. Due to the absence of an HTTPonly cookie, an attacker can successfully steal the cookies of the user and use them to login to...

XSS Vulnerability in Tianniu Website Builder System

Tianniu website builder is an extremely fast online website builder platform. An XSS vulnerability exists in the Tianniu website builder system, which can be exploited by an attacker to obtain user cookie information...

XSS vulnerability in Heybbs micro-community (CNVD-2020-33155)

Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. Heybbs micro-community XSS vulnerability, attackers can use the vulnerability to obtain sensitive information such as user cookies...

XSS vulnerability in kkcms (CNVD-2020-33138)

kkcms is an open source video capture and playback system. kkcms has an XSS vulnerability that can be exploited by attackers to obtain sensitive information such as cookies...

Brave Software: Cookie steal through content Uri

Summary A misconfiguration in a content provider is allowing Brave for Android to download internal files to Downloads folder, making them accessible to other apps. A malicious app could order Brave to download the cookies database and retrieve it afterwards. Environment - Device: HTC M8 - OS...

XSS vulnerability in ejucms (CNVD-2020-30146)

EJU real estate system ejucms is a set of localized O2O real estate website platform system. ejucms exists XSS vulnerability, attackers can exploit the vulnerability to obtain user cookie information...

XSS vulnerability in kkcms

kkcms is an open source video capture and playback system. kkcms has an XSS vulnerability that can be exploited by attackers to obtain user cookie information...

XSS vulnerability in Extreme CMS (CNVD-2020-30150)

Extreme CMS is an open source and free PHPCMS web content management system. Extreme CMS has an XSS vulnerability that can be exploited by attackers to obtain user cookie information...

Stored Cross-Site Scripting Vulnerability in Graphite Document Personal and Enterprise Editions

Graphite Document is an enterprise office service software that supports real-time collaboration in the cloud with features analogous to Google Docs and Quip, which enables multiple people to edit and discuss in real time on the same document and form at the same time, with a synchronized respons...

PT-2020-15041 · Istio · Istio

Name of the Vulnerable Software and Affected Versions: Kiali versions 0.4.0 through 1.15.0 Description: The issue is related to insufficient JWT validation, allowing a remote attacker to steal a valid JWT cookie and use it to spoof a user session. This could potentially grant privileges to view a...